Q: What is the difference between auto-match of ACL and sequence match for MA5200F?
In the configuration of ACL, it prompts the option of match mode. The following presents the different between both match modes
[MA5200G]acl 2050 match-order
auto Auto order
config Config order
Where, config is sequence match, and auto is auto match.
Sequence match: as the name implies, the rule configured first locates at the top, and the later configured follows. When the ACL rule for configuration order specifies the sequence number manually, it arranges the order according to the sequence number from big to small. The smaller number will be at the front and matched first. If the sequence number is not specified, the rule number (starting from the biggest number) will be created ascendingly. If the rule number entered is the same as the existed, the newly configured rule will replace the existed.
Auto-match: the principle of auto match depth first. What is depth first? In short, the more specific (less) the range of rule, the higher the priority, and it ranks on top (comparing with FIB). Auto sequencing does not permit the sequence number of rule to be entered, so the sequence number of ACL is created according to the step length after auto sequencing by system. This is the difference between two match modes.